Skip to content
OpenAdvisories

Package · npm

@react-router/node

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    CVE-2025-61686 Public exploit EPSS 17%

    React Router has Path Traversal in File Session Storage

    React Router is a router for React. In @react-router/node versions 7.0.0 through 7.9.3, @remix-run/deno prior to version 2.17.2, and @remix-run/node prior to version 2.17.2, if createFileSessionStorage() is being used from @react-router/node (or @remix-run/no…

    remix-run react-router @remix-run/node @react-router/node npm